Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/782e6aa3-9a8e-3ca8-b4fa-41da5e9a1e21.roa
File:                     782e6aa3-9a8e-3ca8-b4fa-41da5e9a1e21.roa (raw, json)
Hash identifier:          Q5rtF9YjJMFHkXztLo5bJOrTUDfJnS4W6a1s3vd3K3o=
Subject key identifier:   E8:F4:CE:1A:02:90:95:81:74:43:34:D3:3A:E0:F0:4A:3F:4A:D2:D3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493161E49DC2926ED12614E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/782e6aa3-9a8e-3ca8-b4fa-41da5e9a1e21.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        207.236.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:1e:49:dc:29:26:ed:12:61:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=49388071-7463-457f-b994-e9962b5b1ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:ff:d8:d6:9c:43:29:c0:35:4a:ef:ba:54:
                    58:b0:4d:47:ad:ff:3f:2c:63:34:5b:7f:33:60:24:
                    4e:91:c2:69:38:b9:f1:24:90:72:31:4c:e5:26:86:
                    18:8b:22:b0:89:1f:2a:71:38:43:d0:ae:1d:74:91:
                    cc:a9:00:6a:c3:79:e7:ae:4c:5a:9d:2f:08:92:60:
                    82:f1:ba:d6:e4:5d:57:10:c8:3e:00:5b:7e:ce:06:
                    b1:b5:78:d9:09:6e:f6:09:22:d5:9d:26:24:57:21:
                    1c:d3:af:c6:2e:51:2f:78:59:39:91:f5:dd:92:fc:
                    90:fc:c1:53:b0:49:60:3f:15:a6:3f:f0:3c:a1:9b:
                    11:1b:13:fd:af:a3:d5:26:da:d6:dd:ac:e1:5a:dc:
                    e1:db:c8:a3:c9:a8:6c:f3:72:13:58:08:0c:f9:15:
                    a6:1e:79:57:7e:5d:5a:5d:9e:d0:8e:24:4a:98:e3:
                    0a:62:52:0c:aa:8e:cd:6b:15:b3:d6:8b:26:99:b7:
                    72:40:cf:d6:a4:9d:4d:fe:e1:0b:68:4d:bb:66:af:
                    63:eb:82:30:e4:9b:e8:f9:19:b7:a2:e4:88:84:73:
                    31:9d:49:92:20:50:86:bb:7a:64:fd:3d:78:ca:c8:
                    25:54:21:eb:29:c8:86:ba:46:65:d0:ef:a4:e9:cd:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:CE:1A:02:90:95:81:74:43:34:D3:3A:E0:F0:4A:3F:4A:D2:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/782e6aa3-9a8e-3ca8-b4fa-41da5e9a1e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e4:d8:c8:0b:da:14:c5:29:08:d6:12:98:ec:ab:50:9d:1e:
         48:e0:b8:68:83:00:cc:9a:e2:31:16:84:c8:2c:7f:da:f5:72:
         5c:03:38:c8:a6:25:8a:4b:c2:74:7e:ea:6e:7d:bc:9b:45:75:
         1d:c2:9f:24:49:5d:e8:1d:69:a3:37:20:4d:52:66:8e:55:8b:
         34:e3:61:2d:05:fc:eb:e8:ae:4f:7b:31:1e:e3:e4:0d:b8:ff:
         11:5d:ca:ce:a9:75:50:60:17:42:cb:bf:b1:6e:22:14:2a:e3:
         4f:9b:e2:a3:2d:15:a8:16:78:dc:c2:7c:ee:41:84:31:0c:bf:
         46:d2:39:bd:98:94:da:3a:f3:a6:23:fd:a8:2b:0f:e5:4d:41:
         fe:51:ee:97:10:a6:03:c9:8d:85:18:92:b5:b3:3e:f2:5f:25:
         83:81:74:26:7b:29:9d:17:f0:88:41:a6:76:98:7b:53:d8:24:
         8b:0c:60:00:d9:47:4d:7c:00:14:8d:8d:cb:41:fc:dd:0c:51:
         31:98:93:54:fb:db:15:18:6f:14:c9:50:2f:da:df:d3:62:2c:
         01:b7:91:32:75:be:96:61:ea:a8:3b:4f:f6:33:b6:31:b5:1c:
         40:a4:d0:f8:a5:db:2b:b8:18:d4:dd:be:2f:ff:d4:d0:0a:d2:
         22:7c:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org